4.2.1.10 The flex arrays test ¶

  Problem:  Flexible arrays are a C coding convention that are often
     subject to buffer overrun attacks
  Fix By:   Compiling with -fstrict-flex-arrays=[123]
  Waive If: The application does not use flexible arrays

  Example:  FAIL: flexible test because -fstrict-flex-arrays was not enabled

This is a future test. It is not enabled by default. It checks a security feature that may not be widely available or enforced.

This test checks that the application was compiled with the -fstrict-flex-arrays=[123] command line option enabled. This option enforces a stricter use of flexible arrays that is easier for the compiler to check for ppotential buffer overrun attacks.

The test also checks that the -Wstrict-flex-arrays warning is enabled.

If necessary the test can be disabled via the --skip-flex-arrays option and re-enabled via the --test-flex-arrays option.